X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 1BA6C385841E
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1710866137;
	bh=0ggX3zYRyJdyBdqq/ipvXapqHzb+yX3pgZdH8gLabGo=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=Qaf8rRaVnBw/onMH5OJ33ok89y6NqR65rK/ZvMUNfk5p1fEmc1SozxEmVBBdiXqvD
	 BZQAmEnvjOzCmVAlqocoDUBiAGLkoQ9OjOsVnorYB9pb/Ulr4PLp3lswzcIEdpGpS8
	 iFXHulelWUp673esSv3mZQ+diTeb7UQ0CD3iVmmE=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 34FA23858D1E
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 34FA23858D1E
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1710866113; cv=none;
 b=H+6rxWRpf/kYn/tIYdQ4yP06ClKeZn7ZZCIsX9zq/hl5ql3bKadvgxVC3UnWnZ2rJG4b0JDTWy3bDejjCmUKLD46V3k4EqGHrIIyUwFFvq879/snAD/p9ghf3Nd97VNYRB03rAC7jbPAxgJd5CdXsKdhkrc+SFgXynX4TBBAwgA=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1710866113; c=relaxed/simple;
 bh=9wC+wsEgosub72y8bXYS86KSNhiJg0vi0G9SW98iurY=;
 h=Message-ID:Date:MIME-Version:Subject:To:From;
 b=mtyYbeme3b4i7L6TK++4dfyfTsS850VjpxtKB2YND+fmeCOzna+yhhhZLs/eaKssHQiBSwqlqx0yqIiO59NvF0TkuieA6jy3TrqaU2vLu9aD6iSzaH37H0ReizYOlxWvLMhXuuKrB8nYY4TCy5N+uW4P+pNOL0GAHGpPIbxI+lo=
ARC-Authentication-Results: i=1; server2.sourceware.org
Message-ID: <b974409a-308f-4ed8-b344-7a94fcc22601@SystematicSW.ab.ca>
Date: Tue, 19 Mar 2024 10:35:06 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Getting error 60 of curl to cygwin setup
Content-Language: en-CA
To: cygwin AT cygwin DOT com
References: <CAL8MddVRquNVBMfCtzrLGmrthHHGoyUw9Qfkqg_S6f0FOxJXUg AT mail DOT gmail DOT com>
 <a56e15dd-1ecf-42f5-ac98-e027d358cf41 AT SystematicSW DOT ab DOT ca>
 <CAL8MddUQKYhq3Ag12OYTbxFeGX-8VHriacYj5p4jCwe1Rw0COg AT mail DOT gmail DOT com>
 <87msquxqua.fsf@>
Organization: Systematic Software
In-Reply-To: <87msquxqua.fsf@>
X-Rspamd-Queue-Id: 2062332
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 KAM_EXEURI, KAM_SHORT, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3,
 RCVD_IN_MSPIKE_WL, SPF_HELO_PASS, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE,
 UNPARSEABLE_RELAY autolearn=no autolearn_force=no version=3.4.6
X-Stat-Signature: kfuwtx39rpuqjx69byz7axg5seerph9x
X-Rspamd-Server: rspamout04
X-Session-Marker: 427269616E2E496E676C69734053797374656D6174696353572E61622E6361
X-Session-ID: U2FsdGVkX1/+hw4RboebeHTTl/71BmRJJcaz9yWZV7o=
X-HE-Tag: 1710866107-693039
X-HE-Meta: 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
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Brian Inglis via Cygwin <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Brian Inglis <Brian DOT Inglis AT SystematicSW DOT ab DOT ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 42JGZcoK802596

On 2024-03-19 08:02, ASSI via Cygwin wrote:
> J M via Cygwin writes:
>> $ curl -vvvv -O https://cygwin.com/setup-x86_64.exe
>>    % Total    % Received % Xferd  Average Speed   Time    Time     Time
>>   Current
>>                                   Dload  Upload   Total   Spent    Left
>>   Speed
>>    0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
>>    0* Host cygwin.com:443 was resolved.
>> * IPv6: (none)
>> * IPv4: 8.43.85.97
>> *   Trying 8.43.85.97:443...
>> * Connected to cygwin.com (8.43.85.97) port 443
>> * ALPN: curl offers h2,http/1.1
>> } [5 bytes data]
>> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
>> } [512 bytes data]
>> *  CAfile: /etc/pki/tls/certs/ca-bundle.crt
>> *  CApath: none
>>    0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
>>    0{ [5 bytes data]
>> * TLSv1.3 (IN), TLS handshake, Server hello (2):
>> { [70 bytes data]
>> * TLSv1.2 (IN), TLS handshake, Certificate (11):
>> { [1023 bytes data]
>> * TLSv1.2 (OUT), TLS alert, unknown CA (560):
>> } [2 bytes data]
>> * SSL certificate problem: unable to get local issuer certificate
>>    0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
>>    0
>> * Closing connection
>> curl: (60) SSL certificate problem: unable to get local issuer certificate
>> More details here: https://curl.se/docs/sslcerts.html
>>
>> curl failed to verify the legitimacy of the server and therefore could not
>> establish a secure connection to it. To learn more about this situation and
>> how to fix it, please visit the web page mentioned above.
> 
> Either your cert store is corrupt or something is breaking up the SSL
> connection via MITM.

What do you see when you run these commands:

$ file /etc/pki/tls/certs/*
/etc/pki/tls/certs/ca-bundle.crt:       symbolic link to 
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
/etc/pki/tls/certs/ca-bundle.trust.crt: symbolic link to 
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
$ grep -c '^-----BEGIN.*CERTIFICATE-----$' 
/etc/pki/ca-trust/extracted/{openssl/*.crt,pem/*.pem}
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt:380
/etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem:124
/etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem:301
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:156
$ grep '^#\s\(ISRG\|R3\)' /etc/pki/ca-trust/extracted/{openssl/*.crt,pem/*.pem}
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt:# ISRG Root X1
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt:# ISRG Root X2
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt:# R3
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:# ISRG Root X1
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:# ISRG Root X2
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:# R3

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple